Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/llDn-ldg2lvpRN5qhqULql1vbmM.roa
File: llDn-ldg2lvpRN5qhqULql1vbmM.roa (raw, json)
Hash identifier: 77CfUuwaN+aV1vzbx3qmLcCJnM7LAq8ziCu4VXNFbVA=
Subject key identifier: 96:50:E7:FA:57:60:DA:5B:E9:44:DE:6A:86:A5:0B:AA:5D:6F:6E:63
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 018CC2DB50DE79C73A93753B50430973EAE0
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/llDn-ldg2lvpRN5qhqULql1vbmM.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8283
IP address blocks: 91.208.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:50:de:79:c7:3a:93:75:3b:50:43:09:73:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9650e7fa5760da5be944de6a86a50baa5d6f6e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:06:f4:00:b4:7b:fa:93:31:8d:da:b4:b0:
18:5d:1e:21:27:81:c7:23:c1:17:16:ef:d9:8a:60:
91:69:c2:81:04:df:04:41:0d:0b:33:96:3b:1a:45:
f2:c8:14:54:b7:1d:81:ba:43:0c:61:b9:3e:78:43:
5d:50:0a:b7:55:3d:7a:6a:3f:74:42:3d:93:cd:bf:
6e:cd:99:5d:09:85:fc:6b:19:e6:7a:00:74:85:e2:
a9:ff:bd:9b:9d:a7:0e:87:e9:5b:8d:34:64:d8:c0:
f0:65:fc:80:c8:ae:54:6d:f5:fa:96:48:da:18:87:
af:d2:04:5e:4f:e7:67:43:56:1d:21:b0:aa:ae:c1:
50:b3:6e:f9:b5:15:a6:78:e0:a4:1f:03:e8:61:e8:
2b:ce:67:61:29:d6:ff:78:a8:c4:d8:88:d5:e6:32:
a6:f0:2f:bb:88:1e:49:06:68:ce:b8:af:c1:12:5b:
24:d5:01:25:fe:01:e4:59:15:4b:d0:9e:23:d8:08:
ca:2f:fa:74:04:7e:e4:d1:ba:f3:63:76:18:51:45:
82:64:e1:2c:3e:58:4c:f4:88:20:50:ed:2a:12:ce:
9b:90:37:48:20:b9:d3:df:0a:ff:59:75:a8:13:a5:
70:51:11:64:86:bf:43:2d:8b:64:1a:87:7b:2e:2a:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:50:E7:FA:57:60:DA:5B:E9:44:DE:6A:86:A5:0B:AA:5D:6F:6E:63
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/llDn-ldg2lvpRN5qhqULql1vbmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.34.0/24
Signature Algorithm: sha256WithRSAEncryption
98:43:af:be:1a:52:aa:bf:a1:c6:a7:47:df:0a:05:5b:08:b7:
5e:01:03:24:0c:83:3e:e6:c7:7d:32:ba:a2:2a:6b:d6:94:fb:
bb:46:5c:29:97:6e:e4:b6:58:55:c7:54:59:68:bd:f1:df:44:
1e:d0:91:2a:e7:4a:db:f6:af:9b:49:93:eb:9a:16:ed:05:24:
16:c5:b2:95:1b:68:db:86:f0:10:f4:5d:97:45:06:e4:2a:5f:
6f:37:78:de:a1:9c:a1:7f:f4:fc:76:dd:c2:7d:40:46:f5:c2:
c7:19:3a:2e:ce:14:c6:0b:29:a3:90:7a:45:e8:5a:82:35:65:
02:ad:6f:26:3f:86:2c:82:5e:39:86:dd:93:5f:6a:86:1c:32:
17:ef:01:6f:5e:78:ac:a4:fa:61:50:6f:58:2a:23:6a:cd:4e:
27:52:94:31:c7:e8:e3:e5:a4:b6:52:98:42:18:cd:74:12:dd:
46:56:5c:6a:37:e1:14:9c:9f:c3:a4:88:23:6f:59:be:4d:0b:
12:57:e0:7d:c9:2f:3e:7b:9a:53:aa:5f:bc:91:da:26:e3:cc:
df:c8:3e:4f:53:3b:ca:32:3c:09:c3:2d:cd:4d:bd:27:5f:92:
11:81:5b:97:6e:57:95:a5:eb:05:6a:aa:34:a4:09:3f:bf:88:
7b:ee:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:39:32 2024 by rpki-client on console-ams.rpki-client.org